> Unpacking app.asar without fixing it first will result in an encrypted main.js file and 100 GB of decoy files generated, don't try it.

I know it's not exactly a zip bomb, but it's kinda close, and goddamn, that's obnoxious.